Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft
File: xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft (raw, json)
Hash identifier: GL4YBNtG+Y3p2YCbMXHImutkQplP0iQV7OZbavco/kc=
Subject key identifier: 38:D5:D4:E6:7F:35:D0:B5:34:96:B2:B5:02:7C:6D:61:FC:59:9E:D2
Authority key identifier: C6:C5:8E:D1:AF:96:4A:76:68:E4:43:97:61:9E:E1:98:5A:24:91:C5
Certificate issuer: /CN=c6c58ed1af964a7668e44397619ee1985a2491c5
Certificate serial: 019A4E189D48E670443EA42EA8B079DC1EEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsWO0a-WSnZo5EOXYZ7hmFokkcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft
Manifest number: 1712
Signing time: Tue 04 Nov 2025 09:00:27 +0000
Manifest this update: Tue 04 Nov 2025 09:00:27 +0000
Manifest next update: Wed 05 Nov 2025 09:00:27 +0000
Files and hashes: 1: 7I-4Etn_-ATs5ke2k7C_Ri5wOGE.roa (hash: K1mMFeZqT9P2Y1UVAb4tDIF+y7HhkZLZ9faOLYgkjT4=)
2: XufZiysYk33Xck5lo3CwfpdliJQ.roa (hash: 4ytM8O/KmX8CZCFr30YeKBOK7MtkaAq/PPvvT8k7frg=)
3: xsWO0a-WSnZo5EOXYZ7hmFokkcU.crl (hash: otLXq766untP89aP98OLnMBWQmgvFdXmuAZqf4iSw5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xsWO0a-WSnZo5EOXYZ7hmFokkcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:9d:48:e6:70:44:3e:a4:2e:a8:b0:79:dc:1e:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6c58ed1af964a7668e44397619ee1985a2491c5
Validity
Not Before: Nov 4 09:00:27 2025 GMT
Not After : Nov 5 09:00:27 2025 GMT
Subject: CN=38d5d4e67f35d0b53496b2b5027c6d61fc599ed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:df:53:5b:c9:87:2b:7d:73:c3:8f:82:9c:5c:
b0:ad:fe:95:ff:30:0e:9a:33:88:61:89:fc:4c:d1:
dd:26:3e:55:ef:0e:52:c9:52:44:6c:c7:f1:58:6d:
90:e2:99:36:70:1a:88:4b:7d:6c:b5:4d:50:6a:19:
94:c4:ca:07:01:7f:09:18:46:18:cf:6d:85:c7:20:
a7:7b:06:d5:f3:aa:98:d7:06:ab:83:60:0a:01:25:
c6:07:a4:60:70:a2:5b:66:e3:5e:35:85:02:43:70:
14:ec:c8:ad:6f:6c:1d:cf:7a:f8:ad:ac:45:76:a1:
68:58:4b:1f:ed:6b:94:6c:fd:a5:93:eb:89:68:e3:
11:49:c5:e9:50:9e:cf:99:64:16:d3:8d:05:7e:50:
6f:28:00:30:f0:d5:44:83:f6:00:fd:cb:a6:4f:04:
2e:bd:c8:cd:9c:0d:1b:ac:3e:b9:a7:17:0f:6c:47:
36:d9:dc:65:3f:2f:7f:6a:39:35:55:bf:5a:57:ca:
fc:8d:f3:68:af:f7:cb:b7:5f:1c:b6:9d:89:b5:25:
a9:a9:7a:1e:11:9d:ef:b1:b7:c4:e4:98:60:76:07:
99:27:98:bc:87:d2:6d:49:23:4e:fd:90:7a:c7:10:
85:5f:e7:1b:a2:12:24:15:46:18:ce:7b:60:36:30:
fb:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:D5:D4:E6:7F:35:D0:B5:34:96:B2:B5:02:7C:6D:61:FC:59:9E:D2
X509v3 Authority Key Identifier:
keyid:C6:C5:8E:D1:AF:96:4A:76:68:E4:43:97:61:9E:E1:98:5A:24:91:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsWO0a-WSnZo5EOXYZ7hmFokkcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:03:74:77:6b:60:92:32:08:24:7d:c3:81:20:b2:0e:cf:90:
02:ee:2c:b9:a0:f1:4f:31:8c:55:ce:4c:99:27:cb:b4:f6:85:
23:38:a6:b6:76:f9:09:2f:7b:29:a5:6c:26:bb:1a:1e:56:0a:
d8:c4:7b:3d:a8:8c:ea:52:e0:8d:00:5a:2c:27:7b:9a:b0:45:
c4:d2:5d:dc:ee:02:88:11:6a:aa:02:fa:5b:53:ed:6c:5d:74:
f5:20:68:72:1f:68:ca:d2:2e:45:fe:6d:c7:cc:f0:db:93:f8:
ea:a3:3c:4a:82:f5:55:cf:ba:dd:54:fa:a6:4d:3f:2e:91:c7:
c6:2b:9c:66:d0:8c:cd:e3:e2:66:e9:31:49:98:ed:f9:dd:e3:
ec:34:2a:a5:7f:1d:dc:5a:09:c5:74:9b:ef:62:34:d6:70:8a:
e5:ab:15:9a:ba:cf:34:01:44:90:bb:ca:01:0e:90:84:61:9e:
7a:7e:27:12:17:ed:05:99:bc:d0:37:c7:b5:b6:f3:98:6f:82:
af:bc:0f:c5:f8:87:77:e4:04:c9:db:6c:36:9b:74:cd:73:b6:
e0:f6:fa:04:d7:7b:cb:d0:63:84:87:e7:3b:c2:20:df:af:58:
bf:e0:7b:fb:ef:fe:58:be:af:c8:c3:b3:26:76:aa:5f:cb:39:
24:a4:26:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOGJ1I5nBEPqQuqLB53B7vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2YzU4ZWQxYWY5NjRhNzY2OGU0NDM5NzYxOWVlMTk4NWEy
NDkxYzUwHhcNMjUxMTA0MDkwMDI3WhcNMjUxMTA1MDkwMDI3WjAzMTEwLwYDVQQD
EygzOGQ1ZDRlNjdmMzVkMGI1MzQ5NmIyYjUwMjdjNmQ2MWZjNTk5ZWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs99TW8mHK31zw4+CnFywrf6V/zAO
mjOIYYn8TNHdJj5V7w5SyVJEbMfxWG2Q4pk2cBqIS31stU1QahmUxMoHAX8JGEYY
z22FxyCnewbV86qY1warg2AKASXGB6RgcKJbZuNeNYUCQ3AU7Mitb2wdz3r4raxF
dqFoWEsf7WuUbP2lk+uJaOMRScXpUJ7PmWQW040FflBvKAAw8NVEg/YA/cumTwQu
vcjNnA0brD65pxcPbEc22dxlPy9/ajk1Vb9aV8r8jfNor/fLt18ctp2JtSWpqXoe
EZ3vsbfE5JhgdgeZJ5i8h9JtSSNO/ZB6xxCFX+cbohIkFUYYzntgNjD7aQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDjV1OZ/NdC1NJaytQJ8bWH8WZ7SMB8GA1UdIwQY
MBaAFMbFjtGvlkp2aORDl2Ge4ZhaJJHFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHNXTzBhLVdTblpvNUVPWFlaN2htRm9ra2NVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9mYzI4MTUtZDI5My00MGFmLWJmM2Mt
MWM4YWZkMTlmZGJiLzEveHNXTzBhLVdTblpvNUVPWFlaN2htRm9ra2NVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9mYzI4MTUtZDI5My00MGFmLWJmM2MtMWM4YWZkMTlmZGJi
LzEveHNXTzBhLVdTblpvNUVPWFlaN2htRm9ra2NVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhAN0d2tg
kjIIJH3DgSCyDs+QAu4suaDxTzGMVc5MmSfLtPaFIzimtnb5CS97KaVsJrsaHlYK
2MR7PaiM6lLgjQBaLCd7mrBFxNJd3O4CiBFqqgL6W1PtbF109SBoch9oytIuRf5t
x8zw25P46qM8SoL1Vc+63VT6pk0/LpHHxiucZtCMzePiZukxSZjt+d3j7DQqpX8d
3FoJxXSb72I01nCK5asVmrrPNAFEkLvKAQ6QhGGeen4nEhftBZm80DfHtbbzmG+C
r7wPxfiHd+QEydtsNpt0zXO24Pb6BNd7y9BjhIfnO8Ig369Yv+B7++/+WL6vyMOz
JnaqX8s5JKQm+A==
-----END CERTIFICATE-----
Generated at Tue Nov 4 11:17:53 2025 by rpki-client